CVE-1999-0813
HighExploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
Risk Assessment
Local users can exploit this vulnerability to gain unauthorized access to the system with administrator privileges, posing a serious security threat.
Recommendation
It is recommended to disable the ALLOW_EXECUTION option in Cfingerd and to monitor and restrict access to the system for local users.
Other vulnerabilities in Cfingerd
See all- CVE-1999-0708High
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
- CVE-1999-0243High
The cfingerd service in Linux could be exploited to gain root access.
- CVE-1999-0259Medium
CVE-1999-0259 affects the cfingerd tool, which allows listing all users on a system via a query in the format search.@target.
Original NVD description (English source)
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.